Static task
static1
Behavioral task
behavioral1
Sample
0037cc1ac5c82ed179cd2b7ef7cd5652_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0037cc1ac5c82ed179cd2b7ef7cd5652_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0037cc1ac5c82ed179cd2b7ef7cd5652_JaffaCakes118
-
Size
64KB
-
MD5
0037cc1ac5c82ed179cd2b7ef7cd5652
-
SHA1
3a06b76d0d667c925f88dfcde4bbc219c3cb490b
-
SHA256
b2d0cc1cdb121d7d69303b98c5953203a9bc5b2a0b589f31a2a1feee92adb04b
-
SHA512
ffc3538f80f2051087b512173ba596ee7894daf0a5a2b1885527b1ac1bc8f37d1fbaf803be881d87aaf3841a23939e692ff06068c65a62847a0a7c8a2aa2c7bd
-
SSDEEP
1536:ikUbbl0wlEh1gFFRwxxNj/IoXFxnHxmv:i/bCoEhGFFRwxrrIoXF1Hxmv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0037cc1ac5c82ed179cd2b7ef7cd5652_JaffaCakes118
Files
-
0037cc1ac5c82ed179cd2b7ef7cd5652_JaffaCakes118.exe windows:5 windows x86 arch:x86
2dc40254ba6b4184d3d0f7f417fcd533
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_ftol
strncmp
wprintf
free
wcscpy
wcschr
isxdigit
_XcptFilter
_makepath
_lock
exit
strrchr
_filelength
_osver
__getmainargs
_wtoi
_errno
_onexit
fputs
_snprintf
memset
_wmkdir
__p__fmode
_unlock
version
GetFileVersionInfoA
GetFileVersionInfoW
advapi32
GetTokenInformation
UnlockServiceDatabase
CloseServiceHandle
RegQueryInfoKeyA
RegOpenKeyExA
OpenServiceA
RegQueryValueW
AdjustTokenPrivileges
ChangeServiceConfigA
RegQueryValueExA
RegOpenKeyW
OpenSCManagerW
OpenSCManagerA
StartServiceCtrlDispatcherA
RegSetValueExA
SetSecurityDescriptorDacl
RegEnumValueW
EnumServicesStatusExA
LookupAccountSidW
LookupPrivilegeValueA
OpenProcessToken
RegDeleteValueW
AllocateAndInitializeSid
RegCreateKeyW
RegEnumKeyExW
RegDeleteKeyA
QueryServiceConfigA
ChangeServiceConfig2A
CreateServiceA
gdi32
GetRgnBox
Pie
CreateDIBitmap
CreateCompatibleBitmap
RoundRect
CreateMetaFileA
GetTextExtentPoint32W
EndPage
GetBrushOrgEx
CloseMetaFile
SetROP2
GetMapMode
ScaleWindowExtEx
TranslateCharsetInfo
GdiFlush
Arc
GetDIBColorTable
SetPixelV
GetTextMetricsA
SelectClipRgn
SetRectRgn
RealizePalette
CreateEllipticRgn
GetObjectA
ExtFloodFill
SetStretchBltMode
GetTextMetricsW
GetEnhMetaFileBits
kernel32
GetLastError
DeleteCriticalSection
CreateEventW
EnumSystemLocalesA
WritePrivateProfileStructA
GetProcAddress
GetUserDefaultLCID
LCMapStringW
GetStartupInfoA
VirtualAlloc
TlsGetValue
CreateFileMappingA
DisableThreadLibraryCalls
ExitProcess
TlsFree
FindFirstFileA
GetACP
VirtualQuery
Sections
.text Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ